CVE-2011-2654: Input Validation
The RPC implementation in the server in Novell Cloud Manager 1.1.2 before Patch 3 does not properly initialize objects, which allows remote attackers to execute arbitrary code by making RPC calls that leverage incorrect privileges associated with a partially initialized session.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2654?
CVE-2011-2654 is classified as a critical vulnerability due to its ability to allow remote code execution.
How do I fix CVE-2011-2654?
To mitigate CVE-2011-2654, update Novell Cloud Manager to version 1.1.2 with the latest patches applied.
Which versions of Novell Cloud Manager are affected by CVE-2011-2654?
CVE-2011-2654 affects Novell Cloud Manager versions 1.1.2 and earlier versions without the latest patch.
Can CVE-2011-2654 lead to unauthorized access?
Yes, CVE-2011-2654 can potentially allow attackers to gain unauthorized access and execute arbitrary code on the affected system.
Is there a workaround for CVE-2011-2654 if I cannot update immediately?
A temporary workaround for CVE-2011-2654 may involve disabling RPC services until the software can be updated to mitigate the risk.